IT Audit Services.

Independent and objective review of your IT infrastructure.

experienced, independent IT auditors.

Our IT audit services provide an independent and objective review of an organization’s IT infrastructure, control configuration, and regulatory compliance through in-depth testing and expert analysis. As part of our IT audit services, our team collects and evaluates evidence of your organization’s technical controls, policies and procedures, and other related documentation to ensure the availability, confidentiality, and integrity of mission-critical systems and data. Our team works directly with yours to ensure efficiency throughout the audit process.

GraVoc’s auditors maintain several professional certifications, including Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), and Certified Information Systems Security Professional (CISSP). Our IT audit service area expands throughout Massachusetts, Southern New Hampshire, and New England but are not limited to these states.

benefits of IT audit:

Identify and remediate control gaps
Evaluate and enhance security controls to properly protect sensitive IT and information assets
Ensure compliance with data security, privacy, and cybersecurity regulations
Improve your organization’s overall security posture

our IT audit process.

discovery phase.

Perform an in-depth review of the physical, administrative, and technical controls applied across an organization’s IT operation.

analysis phase.

Evaluate the information gathered to identify potential control gaps and risk exposure.

reporting phase.

Deliver a detailed report that provides an explanation of the control gaps identified and associated risks along with recommendations for improvement.

our IT audit control domains:

Management & Oversight.

Our team will review your overall IT organization, including IT management practices, defined authority and responsibility among personnel, strategic planning, and audit resolution tracking, to determine the adequacy of existing controls.

Third-Party Technology Service Providers.

Here, our team will review your vendor relationship management practices for third-party technology service providers and assess current controls to manage risks associated with these partnerships.

Application Controls.

Our team will verify the adequacy of controls within your organization’s mission-critical business applications and service delivery channels.

audit icon

Policies & Procedures.

To evaluate the reliability and efficiency of controls under this domain, our team will assess the policies and procedures pertaining to the use and management of your IT infrastructure, including your disaster recovery/business continuity plan, incident response, and information security program.

Network Security & General Systems Controls.

For this domain analysis, our team will review access controls and security configurations on your local and wide area network. Our team will also evaluate controls relevant to IT governance and the physical security of IT equipment.

our certifications include:

CCNA Security

Cisco Certified Network Associate Security


Certified Information Security Manager


Certified Information Systems Auditor


Certified in Risk and Information Systems Control


Certified Ethical Hacker


Certified Information Systems Security Professional


EC-Council Certified Incident Handler


Microsoft Certified Professional

by the numbers.


customer retention

clients we serve

professional security certifications

common goal: YOUR SUCCESS!

let’s talk about security.

Do you have a question or want to discuss our IT Audit services?
Contact a GraVoc employee by filling out the form below. 

other IT audit services that we offer.

Compliance Gap Analysis

Security Configuration Review


information security news.

Information Technology Audit Service Area

GraVoc is located in Peabody Massachusetts, just north of Boston, and provides Information Security services including IT Audit, IT General Controls Audit and Compliance Gap Analysis to businesses and organzations in the New England area. GraVoc’s Information Security Auditors hold certifications in CCNA Security, CISM, CISA, CRISC, C|EH, CISSP, and E|CIH. Below is a list of our Massachusetts and New Hampshire IT Audit service area. GraVoc also provides IT Audit services in Connecticut, Maine, Rhode Island and Vermont but are not limited to these states.

Massachusetts IT Audit service area:

Acton, Amesbury, Andover, Arlington, Ashby, Ashland, Ayer, Bedford, Belmont, Beverly, Billerica, Boston, Boxborough, Boxford, Burlington, Cambridge, Carlisle, Chelmsford, Chelsea, Concord, Danvers, Dracut, Dunstable, East Boston, Essex, Everett, Framingham, Georgetown, Gloucester, Groton, Groveland, Hamilton, Haverhill, Holliston, Hopkinton, Hudson, Ipswich, Lawrence, Lexington, Lincoln, Littleton, Lowell, Lynn, Lynnfield, Malden, Manchester by the sea, Marblehead, Marlborough, Maynard, Medford, Melrose, Merrimac, Methuen, Middleton, Nahant, Natick, Newbury, Newburyport, Newton, North Andover, North Reading, Peabody, Pepperell, Reading, Revere, Rockport, Rowley, Salem, Salisbury, Saugus, Sherborn, Shirley, Somerville, Stoneham, Stow, South Boston, Sudbury, Swampscott, Tewksbury, Topsfield, Townsend, Tyngsborough, Wakefield, Waltham, Watertown, Wayland, Wenham, West Newbury, Westford, Weston, Wilmington, Winchester, Winthrop and Woburn.

Our Massachusetts IT Audit service area also includes: Barnstable County, Berkshire County, Bristol County, Dukes County, Franklin County, Hamden County, Hampshire County, Nantucket County, Norfolk County, Plymouth County and Worcester County.

New Hampshire IT Audit service area: 

Amherst, Andover, Atkinson, Auburn, Boscawen, Bow, Bradford, Brentwood, Candia, Canterbury, Chester, Concord, Danbury, Danville, Deerfield, Derry, Dunbarton, East Kingston, Epping, Epsom, Exeter, Franklin, Fremont, Greenland, Hampstead, Hampton Falls, Hampton, Henniker, Hill, Hooksett, Hopkinton, Kensington, Kingston, Loudon, Lyndeborough, New Castle, New London, Newbury, Newfields, Newington, Newmarket, Newton, Northfield, North Hampton, Northwood, Nottingham, Pembroke, Pittsfield, Plaistow, Portsmouth, Raymond, Rye, Salem, Salisbury, Sandown, Seabrook, South Hampton, Stratham, Sutton, Warner, Webster, Wilmot and Windham.

Our New Hampshire IT Audit service area also includes: Hillsborough CountyRockingham County and Cheshire County.